All components
Attest verifier
Attestation checks the eligible environment, GPU evidence and measured model stack.
Data flow
The verifier checks the TDX quote, GPU evidence and allowlisted image or model measurements for sealed-lane nodes (in testing). The design requires fresh attestation for private jobs.
Design boundary
Attestation is a defined execution boundary. The specification discloses absent TDISP binding and physical attacks outside its scope.
How it fits
Eligible confidential nodes attach environment and GPU evidence to the sealed job’s work record.
Lifecycle
The same cumulative claimed balance prevents consuming one entitlement again through a different route.